Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier: UhpHKDpdwBnA/e6WXC4vq72d/Uo86STwjOyXiYNVegA=
Subject key identifier: CB:98:80:12:2B:40:96:9F:B0:F1:80:A8:67:38:2F:E4:D1:D6:DA:B1
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer: /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial: 3A43B864F9E2C242360BEE11B418AA30AEDED568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number: F6
Signing time: Mon 10 Nov 2025 22:27:25 +0000
Manifest this update: Mon 10 Nov 2025 22:22:25 +0000
Manifest next update: Tue 11 Nov 2025 23:18:25 +0000
Files and hashes: 1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: EE8jbu5k6LynHSETZ4tH2qv7rcqtaNlPtBFqnzoNHM0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 23:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:b8:64:f9:e2:c2:42:36:0b:ee:11:b4:18:aa:30:ae:de:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Validity
Not Before: Nov 10 22:22:25 2025 GMT
Not After : Nov 11 23:18:25 2025 GMT
Subject: CN=CB9880122B40969FB0F180A867382FE4D1D6DAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:77:b2:9a:77:1f:9d:c5:86:25:ab:11:15:
fa:9d:9e:2e:83:a4:1b:8d:6e:fa:bb:ca:00:3e:0d:
da:2a:ff:98:4a:2a:cf:9c:a5:64:25:ff:7c:62:8b:
af:67:01:c5:82:6f:f8:c8:8a:7c:8c:9c:8b:f2:ba:
e7:a7:ec:91:ed:22:e9:a3:6e:d8:90:6c:aa:02:98:
32:c2:a0:08:32:35:3b:7a:52:12:85:8f:5c:a3:ce:
03:4c:8f:db:94:d1:57:44:97:ea:63:bf:80:f9:bc:
95:fb:fc:a9:94:74:7f:4c:62:aa:d6:d9:3d:e6:83:
9b:b9:58:51:4a:44:df:ee:87:0c:da:e3:15:6b:6f:
fb:33:6a:b5:3b:4c:99:9d:08:e2:df:2f:f6:4b:70:
61:e7:ff:b4:cf:50:7d:5e:9b:25:2e:c7:f6:33:50:
11:97:e2:0a:73:b2:60:0a:26:fd:4f:16:4e:a6:24:
86:49:b4:33:4f:05:75:4e:7f:c5:83:af:fc:7d:cb:
36:40:96:69:ef:e0:db:42:fe:b5:e4:34:9a:71:fe:
b3:3c:fb:ce:18:94:3c:bc:fb:bc:58:67:5a:f5:25:
e1:d2:89:cf:5d:49:b1:a8:18:d5:da:39:fd:f8:88:
18:ee:99:40:14:8d:1a:eb:34:ce:31:59:d5:d3:5f:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:80:12:2B:40:96:9F:B0:F1:80:A8:67:38:2F:E4:D1:D6:DA:B1
X509v3 Authority Key Identifier:
keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:54:55:a2:a0:97:16:fd:8a:75:3b:66:f8:98:84:e3:39:6b:
e9:79:69:25:ff:6b:e1:2d:be:d4:7d:dd:65:0a:5e:ce:e8:65:
0b:f8:0e:bd:c7:3c:6f:31:58:37:32:52:82:2d:7b:02:23:c5:
59:5d:38:fa:f8:28:c2:3d:d7:df:ec:1b:9c:2a:95:1b:32:f7:
97:86:1c:bc:b6:7f:53:ac:04:24:23:bb:ec:41:25:4c:d0:56:
f6:87:9e:c8:c9:7c:e0:ef:c2:36:a3:2b:ec:eb:9f:ca:f4:26:
48:3c:dd:52:90:91:48:12:2a:07:3b:f1:a9:9a:5f:be:59:25:
20:c4:32:c7:84:92:63:f2:cf:7d:d0:21:70:29:ed:98:9c:53:
eb:d0:89:26:d2:ee:6c:ef:73:f7:ad:3f:78:14:7b:e4:55:2b:
cf:4e:1e:b9:77:ac:4c:2d:f5:3b:a7:73:d5:04:11:98:a6:05:
5b:6d:d3:7c:b1:5e:e7:21:f8:84:6e:33:4b:49:92:72:52:53:
78:e8:3a:82:50:52:0d:53:79:79:ce:10:d6:2f:56:ef:ba:9a:
85:c8:93:05:67:a2:18:27:10:73:b3:bd:66:fe:79:5c:fa:98:
80:24:8b:1c:33:8c:0e:c7:65:2a:4d:66:d8:21:ed:ca:fc:e0:
18:40:dd:88
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOkO4ZPniwkI2C+4RtBiqMK7e1WgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFjNDZhYWZkMTVlZWUwYjFmZTYwNzJlNGYwZGRmMjcx
YzAzZWU1MTAeFw0yNTExMTAyMjIyMjVaFw0yNTExMTEyMzE4MjVaMDMxMTAvBgNV
BAMTKENCOTg4MDEyMkI0MDk2OUZCMEYxODBBODY3MzgyRkU0RDFENkRBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPneymncfncWGJasRFfqdni6D
pBuNbvq7ygA+Ddoq/5hKKs+cpWQl/3xii69nAcWCb/jIinyMnIvyuuen7JHtIumj
btiQbKoCmDLCoAgyNTt6UhKFj1yjzgNMj9uU0VdEl+pjv4D5vJX7/KmUdH9MYqrW
2T3mg5u5WFFKRN/uhwza4xVrb/szarU7TJmdCOLfL/ZLcGHn/7TPUH1emyUux/Yz
UBGX4gpzsmAKJv1PFk6mJIZJtDNPBXVOf8WDr/x9yzZAlmnv4NtC/rXkNJpx/rM8
+84YlDy8+7xYZ1r1JeHSic9dSbGoGNXaOf34iBjumUAUjRrrNM4xWdXTX2ulAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUy5iAEitAlp+w8YCoZzgv5NHW2rEwHwYDVR0j
BBgwFoAUGsRqr9Fe7gsf5gcuTw3fJxwD7lEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWVhZjFmNmItMjA4MS00NjdhLTgwMzktZjFmOTY5YjRm
YjY2LzAvMUFDNDZBQUZEMTVFRUUwQjFGRTYwNzJFNEYwRERGMjcxQzAzRUU1MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dzUnFyOUZlN2dzZjVnY3VUdzNmSnh3
RDdsRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZWFmMWY2Yi0y
MDgxLTQ2N2EtODAzOS1mMWY5NjliNGZiNjYvMC8xQUM0NkFBRkQxNUVFRTBCMUZF
NjA3MkU0RjBEREYyNzFDMDNFRTUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlRVoqCXFv2KdTtm+JiE
4zlr6XlpJf9r4S2+1H3dZQpezuhlC/gOvcc8bzFYNzJSgi17AiPFWV04+vgowj3X
3+wbnCqVGzL3l4YcvLZ/U6wEJCO77EElTNBW9oeeyMl84O/CNqMr7OufyvQmSDzd
UpCRSBIqBzvxqZpfvlklIMQyx4SSY/LPfdAhcCntmJxT69CJJtLubO9z960/eBR7
5FUrz04euXesTC31O6dz1QQRmKYFW23TfLFe5yH4hG4zS0mSclJTeOg6glBSDVN5
ec4Q1i9W77qahciTBWeiGCcQc7O9Zv55XPqYgCSLHDOMDsdlKk1m2CHtyvzgGEDd
iA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:44 2025 by rpki-client